Microsoft Modern Work Engineer

As a Microsoft Modern Work Engineer, you will oversee the delivery of client-facing professional services projects centered on Microsoft Modern Work technologies. This position demands in-depth expertise in designing, deploying, and optimizing solutions involving Microsoft Entra, Intune, Autopilot, Office 365, Active Directory, Group Policy Objects, and Quest Migration tools. You will collaborate with clients to evaluate business needs, architect tailored solutions, and implement deployments that advance security, productivity, and the overall end-user experience. ESSENTIAL FUNCTIONS: Gain and maintain expertise across Microsoft Modern Work technologies, including Entra ID, Intune, Autopilot, O365, and on-premises AD. Deliver client engagements including assessments, design sessions, implementation, and post-deployment optimization. Lead and execute device management initiatives, including Autopilot enrollment, configuration baselines, compliance policies, and endpoint security hardening. Architect and implement Microsoft Entra identity solutions including Conditional Access, MFA, SSO integrations, and identity lifecycle management. Perform migrations using Quest Migration Manager or similar tools for directory, identity, or tenant transitions. Develop, test, and deploy Group Policy Objects (GPO) and assist clients in modernizing GPO settings into cloud-native Intune policies. Troubleshoot complex issues across identity, device management, authentication, policy enforcement, and collaboration workloads. Provide technical mentorship, documentation, and knowledge transfer to clients and internal teams. Contribute to best practices, documentation libraries, and technology practice groups. Maintain accurate documentation, communication, and time entry for all engagements. Stay current with Microsoft’s evolving Modern Work roadmap, tooling, and security capabilities. Actively participated in Marco’s Microsoft Modern Work Technology Practice Group (TPG). QUALIFICATIONS: Associate or bachelor’s degree in information technology, computer science, cyber/information security, or a related field. 5+ years of professional services or systems engineering experience. Demonstrated experience with Microsoft Entra, Intune, Autopilot, O365, Active Directory, and GPO management. Experience with Quest Migration tools or equivalent technologies. Microsoft certifications preferred (MD-102, SC-300, AZ-104, MS-102, or similar). REQUIRED SKILLS: Deep understanding of Microsoft identity, endpoint, and collaboration ecosystems. Practical experience with: Microsoft Entra (identity governance, Conditional Access, MFA) Intune device management Autopilot provisioning Office 365 configuration and administration Active Directory and Group Policy Objects Quest Migration tools Experience with PowerShell scripting to automate administrative tasks. Knowledge of NIST, CIS, or similar security frameworks. Excellent documentation, communication, and client-engagement skills. Exceptional organization and time management skills. Ability to work independently in dynamic client environments. Demonstrates integrity, professionalism, and alignment with organizational values PAY RANGE: $93,318 - $149,309 annually The pay range listed for this position is based on candidate's skill level, experience, relevant licenses, and educational background. For detailed information about our benefits, please visit our careers page at www.marconet.com/careers . LOCATION: This is a remote-eligible position, however, Marco Technologies requires employees to reside within one of the following states: DE, FL, IA, IL, IN, KY, MD, MI, MN, MO, ME, NE, ND, NJ, PA, RI, SD, TX, WI